masscan_to_nmap.sh

#!/bin/bash

################################################################################
# masscan_to_nmap.sh - Workflow Híbrido Masscan → Nmap
#
# Descripción:
#   Script que automatiza el workflow profesional de reconocimiento:
#   1. Masscan: Escaneo RÁPIDO de todos los puertos (6-10 segundos)
#   2. Nmap: Análisis DETALLADO solo de puertos abiertos (versiones + scripts)
#
# Uso:
#   ./masscan_to_nmap.sh <target_ip> [output_dir]
#
# Ejemplo:
#   ./masscan_to_nmap.sh 10.10.10.8
#   ./masscan_to_nmap.sh 192.168.1.100 scans/target1
#
# Requisitos:
#   - masscan (sudo apt install masscan)
#   - nmap
#   - sudo privileges
#
# Autor: @3diklab
# Inspirado en luvliscan (Mi script privado)
################################################################################

set -euo pipefail

# Colores
readonly RED='\033[1;31m'
readonly GREEN='\033[1;32m'
readonly YELLOW='\033[1;33m'
readonly BLUE='\033[1;34m'
readonly CYAN='\033[1;36m'
readonly NC='\033[0m'

# Configuración
readonly MASSCAN_RATE="${MASSCAN_RATE:-10000}"
readonly NMAP_TIMING="${NMAP_TIMING:-4}"

################################################################################
# Funciones auxiliares
################################################################################

log_info() {
    echo -e "${BLUE}[INFO]${NC} $*"
}

log_success() {
    echo -e "${GREEN}[✓]${NC} $*"
}

log_error() {
    echo -e "${RED}[✗]${NC} $*" >&2
}

log_warning() {
    echo -e "${YELLOW}[!]${NC} $*"
}

show_banner() {
    echo ""
    echo -e "${CYAN}╔═══════════════════════════════════════════════════════════╗${NC}"
    echo -e "${CYAN}║${NC}                                                           ${CYAN}║${NC}"
    echo -e "${CYAN}║${NC}    ${GREEN}MASSCAN → NMAP WORKFLOW${NC}                                ${CYAN}║${NC}"
    echo -e "${CYAN}║${NC}    ${YELLOW}Reconocimiento Híbrido Profesional${NC}                     ${CYAN}║${NC}"
    echo -e "${CYAN}║${NC}                                                           ${CYAN}║${NC}"
    echo -e "${CYAN}║${NC}    ${BLUE}@3diklab${NC}                                               ${CYAN}║${NC}"
    echo -e "${CYAN}║${NC}                                                           ${CYAN}║${NC}"
    echo -e "${CYAN}╚═══════════════════════════════════════════════════════════╝${NC}"
    echo ""
}

validate_requirements() {
    local missing=()

    if ! command -v masscan &> /dev/null; then
        missing+=("masscan")
    fi

    if ! command -v nmap &> /dev/null; then
        missing+=("nmap")
    fi

    if [ ${#missing[@]} -gt 0 ]; then
        log_error "Missing required tools: ${missing[*]}"
        log_info "Install with: sudo apt install ${missing[*]}"
        return 1
    fi

    if [ "$EUID" -ne 0 ]; then
        log_warning "This script requires sudo for masscan"
        log_info "Re-running with sudo..."
        exec sudo bash "$0" "$@"
    fi

    return 0
}

validate_ip() {
    local ip=$1
    if [[ ! $ip =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ ]]; then
        log_error "Invalid IP address format: $ip"
        return 1
    fi
    return 0
}

################################################################################
# Funciones principales
################################################################################

run_masscan() {
    local target=$1
    local output_file=$2

    log_info "Starting MASSCAN on $target (rate: $MASSCAN_RATE pps)"
    echo ""

    local start_time=$(date +%s)

    if masscan "$target" -p1-65535 --rate="$MASSCAN_RATE" -oG "$output_file" 2>/dev/null; then
        local end_time=$(date +%s)
        local duration=$((end_time - start_time))

        log_success "Masscan completed in ${duration}s"
        return 0
    else
        log_error "Masscan failed"
        return 1
    fi
}

parse_ports() {
    local masscan_file=$1

    # Extraer puertos abiertos del formato grepable de masscan
    # Formato: Timestamp: 1762109848	Host: 45.33.32.156 ()	Ports: 31337/open/tcp//unknown//
    grep "Ports:" "$masscan_file" 2>/dev/null | \
        awk '{print $7}' | \
        cut -d'/' -f1 | \
        sort -n | \
        uniq | \
        tr '\n' ',' | \
        sed 's/,$//'
}

run_nmap() {
    local target=$1
    local ports=$2
    local output_dir=$3

    log_info "Starting NMAP service detection on ports: $ports"
    echo ""

    local start_time=$(date +%s)

    nmap -p"$ports" -sCV -T"$NMAP_TIMING" -oA "$output_dir/nmap_service_scan" "$target"

    local end_time=$(date +%s)
    local duration=$((end_time - start_time))

    log_success "Nmap completed in ${duration}s"
}

display_results() {
    local nmap_file=$1

    echo ""
    echo -e "${GREEN}╔═══════════════════════════════════════════════════════════╗${NC}"
    echo -e "${GREEN}║${NC}  ${YELLOW}SCAN RESULTS${NC}                                             ${GREEN}║${NC}"
    echo -e "${GREEN}╚═══════════════════════════════════════════════════════════╝${NC}"
    echo ""

    if [ -f "$nmap_file.nmap" ]; then
        grep -E "^[0-9]+/tcp|^[0-9]+/udp" "$nmap_file.nmap" || log_warning "No open ports found"
    fi

    echo ""
}

################################################################################
# Main
################################################################################

main() {
    show_banner

    # Validar argumentos
    if [ $# -lt 1 ]; then
        log_error "Usage: $0 <target_ip> [output_dir]"
        echo ""
        echo "Example:"
        echo "  $0 10.10.10.8"
        echo "  $0 192.168.1.100 scans/target1"
        echo ""
        exit 1
    fi

    local target=$1
    local output_dir="${2:-.}"

    # Validaciones
    validate_ip "$target" || exit 1
    validate_requirements || exit 1

    # Crear directorio de salida
    mkdir -p "$output_dir"

    local masscan_file="$output_dir/masscan_results.gnmap"

    # Fase 1: Masscan
    echo -e "${CYAN}═══ PHASE 1: FAST PORT DISCOVERY (MASSCAN) ═══${NC}"
    echo ""
    run_masscan "$target" "$masscan_file" || exit 1

    # Parsear puertos
    local ports=$(parse_ports "$masscan_file")

    if [ -z "$ports" ]; then
        log_error "No open ports found or parsing failed"
        log_info "Check: $masscan_file"
        exit 1
    fi

    local port_count=$(echo "$ports" | tr ',' '\n' | wc -l)
    log_success "Found $port_count open port(s): $ports"

    echo ""
    echo -e "${CYAN}═══ PHASE 2: SERVICE DETECTION (NMAP) ═══${NC}"
    echo ""

    # Fase 2: Nmap
    run_nmap "$target" "$ports" "$output_dir"

    # Mostrar resultados
    display_results "$output_dir/nmap_service_scan"

    log_success "Scan completed!"
    log_info "Results saved in: $output_dir/"
    echo ""
}

# Ejecutar
main "$@"